Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3695CC5/08A9704E211C11ECAE74FE2BD8A014CE/5712E4D4211E11ECBF338B2FD8A014CE.roa
File:                     5712E4D4211E11ECBF338B2FD8A014CE.roa (raw, json)
Hash identifier:          7rN8DhsshMwgblYVnVi1mgyOFuiOP5BprvAXrFTM7S0=
Subject key identifier:   B2:32:0F:3D:0A:AE:6B:47:FC:A1:33:83:DD:3B:89:D7:4C:0E:10:CA
Certificate issuer:       /CN=F3695CC5AF/serialNumber=A5E79BF2D8B5DC902EE0AF67941DE68328C225D6
Certificate serial:       02
Authority key identifier: A5:E7:9B:F2:D8:B5:DC:90:2E:E0:AF:67:94:1D:E6:83:28:C2:25:D6
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/peeb8ti13JAu4K9nlB3mgyjCJdY.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3695CC5/08A9704E211C11ECAE74FE2BD8A014CE/5712E4D4211E11ECBF338B2FD8A014CE.roa
Signing time:             Wed 29 Sep 2021 12:11:14 +0000
ROA not before:           Wed 29 Sep 2021 12:11:10 +0000
ROA not after:            Fri 29 Sep 2023 12:11:10 +0000
asID:                     37443
IP address blocks:        2c0f:ffe8::/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3695CC5AF/serialNumber=A5E79BF2D8B5DC902EE0AF67941DE68328C225D6
        Validity
            Not Before: Sep 29 12:11:10 2021 GMT
            Not After : Sep 29 12:11:10 2023 GMT
        Subject: CN=615457e1-51fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:c9:de:e3:99:1f:65:6d:74:50:b2:f7:cf:85:
                    af:b9:0e:92:f0:33:77:74:23:68:60:21:0b:d6:25:
                    23:73:6f:aa:33:ec:9b:5f:27:6b:e7:49:f0:2d:35:
                    61:56:4f:b8:df:f4:34:5d:d8:4a:b4:30:5e:e3:13:
                    03:9f:44:aa:0a:89:f0:97:30:0c:2f:d4:78:f2:46:
                    e0:af:fa:0c:fb:d3:cb:4e:07:31:99:12:76:33:34:
                    ff:dd:18:64:6c:37:12:3a:bf:64:50:e5:c0:3b:26:
                    27:a4:5f:7f:86:65:ed:8f:61:c5:23:80:c3:6e:21:
                    25:8b:f4:54:c3:03:4f:3c:ae:d5:21:33:d5:b7:70:
                    11:6b:c4:5f:a4:19:c7:06:3e:de:f9:15:69:01:af:
                    b1:1f:82:03:07:99:f6:82:58:25:bf:36:c2:37:ba:
                    e7:4d:52:8c:6c:ae:94:35:f5:fe:49:06:96:d8:12:
                    c3:ee:ff:91:26:f9:f0:48:01:8a:21:95:a1:f1:f6:
                    40:f2:c3:16:aa:14:f4:c1:a3:f3:1a:81:c0:c0:c0:
                    7e:79:80:f6:5e:17:cc:b1:e2:e3:60:95:4a:a4:3f:
                    37:af:bc:27:85:6c:93:de:b0:a8:36:29:dc:4e:32:
                    a8:82:7f:76:0b:cd:e8:69:55:db:1c:80:c2:74:40:
                    38:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:32:0F:3D:0A:AE:6B:47:FC:A1:33:83:DD:3B:89:D7:4C:0E:10:CA
            X509v3 Authority Key Identifier:
                keyid:A5:E7:9B:F2:D8:B5:DC:90:2E:E0:AF:67:94:1D:E6:83:28:C2:25:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3695CC5/08A9704E211C11ECAE74FE2BD8A014CE/peeb8ti13JAu4K9nlB3mgyjCJdY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/peeb8ti13JAu4K9nlB3mgyjCJdY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3695CC5/08A9704E211C11ECAE74FE2BD8A014CE/5712E4D4211E11ECBF338B2FD8A014CE.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2c0f:ffe8::/32

    Signature Algorithm: sha256WithRSAEncryption
         0e:d6:67:e1:1c:c1:64:07:52:b0:2f:48:fa:41:af:3d:07:54:
         f2:7e:5e:37:ea:b6:df:84:35:97:c1:e2:b6:d3:01:25:97:a4:
         d8:84:37:c3:8e:79:91:4f:3d:b8:1e:61:44:5e:7d:75:b0:70:
         43:68:a0:99:2f:0c:21:dc:f4:a9:92:6d:a2:3b:00:1d:93:51:
         98:b3:80:1f:ed:c4:b9:85:4c:f9:81:5f:7d:59:08:4c:de:f9:
         41:67:ad:1e:88:cd:61:c3:ca:e7:f1:53:5c:93:e1:2e:6f:93:
         e3:cf:1a:4b:ec:00:59:f3:d5:05:9c:0f:11:f3:0c:8b:8f:65:
         6c:25:de:61:59:6e:be:dd:18:80:09:e3:7f:60:b7:9e:62:9d:
         c5:2a:53:54:66:12:28:36:ed:fa:18:4d:d2:49:41:52:bc:b2:
         0a:64:72:56:80:71:ca:fe:61:4f:c0:55:c0:11:ad:b8:16:75:
         6d:6f:4d:3f:d2:21:06:45:52:58:c6:b1:84:41:dc:a4:cd:bf:
         bc:d1:20:bf:1c:56:08:d3:f9:38:88:84:46:6c:06:cf:d8:a5:
         fa:63:83:e1:1b:f8:e3:c4:ca:b7:7c:a8:58:fb:d7:eb:13:0c:
         93:c1:f3:cf:1f:07:38:4c:5c:23:5c:0b:1c:4b:46:28:4a:ce:
         8c:4f:e1:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----